Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File: oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier: tjRzuLddlzPc36+GIACN9/wEnlxjQvP5TC4LEM1QzEA=
Subject key identifier: BA:10:4F:F4:63:EF:71:F3:11:D8:5B:0E:E1:7F:CF:3D:5E:5F:46:08
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer: /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial: 01991EB02FA179202765C5F869FB2055AD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number: 0D7E
Signing time: Sat 06 Sep 2025 11:01:26 +0000
Manifest this update: Sat 06 Sep 2025 11:01:26 +0000
Manifest next update: Sun 07 Sep 2025 11:01:26 +0000
Files and hashes: 1: ILIvvSN7jhBNrgAFepnE5fxAfIc.roa (hash: qrswcvi6gW3Bxpx7V6TKM6+tVg0zuZnKPktwjp/YCHs=)
2: S4AYf34wbJr686FuAfXvLLFVW90.roa (hash: QoZkIggV0Rak9NY5B7MD5kJpzqBlOZcHQ7nSTP7ujCU=)
3: jzKy-bNbEooaDReNok2j2yv-pdI.roa (hash: GUiFogVUQmG0/pMsKlem+Qrlz+e50kXxDrB2fF+wH/s=)
4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: DlUw/tLY5irXhPmHJ/NJADIArWNjLTYe7tPzeNx7hWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:b0:2f:a1:79:20:27:65:c5:f8:69:fb:20:55:ad:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Validity
Not Before: Sep 6 11:01:26 2025 GMT
Not After : Sep 7 11:01:26 2025 GMT
Subject: CN=ba104ff463ef71f311d85b0ee17fcf3d5e5f4608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:64:b0:7e:3d:00:01:a6:e7:2a:39:cf:f8:
af:89:3c:53:c9:ed:f0:f7:0d:bb:5c:0c:de:80:05:
2b:3e:d5:01:6e:8a:3b:a7:78:f2:92:76:89:ae:ce:
36:c9:6a:cf:01:f5:05:0a:8b:9d:73:b1:21:40:8a:
ce:4c:2e:9c:cb:2e:16:6f:26:d2:4a:3c:85:7f:aa:
38:ca:d6:b7:b4:6e:25:cf:60:04:13:8c:38:fb:d2:
46:0a:63:a4:ff:7b:b1:ad:42:8e:63:e3:8c:b2:b1:
21:cc:aa:24:9d:45:5c:82:38:a1:a9:26:2d:6f:ac:
e8:44:3f:65:04:ef:59:d0:3a:06:61:69:c1:fa:e6:
8b:20:50:a8:9c:1b:3f:95:72:48:a2:85:6d:65:22:
0b:e0:69:51:21:33:cb:d6:8b:d3:70:32:79:33:01:
25:d6:39:d3:d7:15:ea:56:9f:74:71:82:90:2a:69:
a9:14:b8:06:81:2b:35:f8:b5:2f:17:f6:8d:fd:07:
5d:29:0f:fa:70:24:b0:21:83:9d:09:01:85:cc:6c:
ae:8e:c5:c3:c3:c4:d8:7b:cf:98:4e:96:75:3d:a8:
d9:8b:3c:5a:ba:de:0b:08:50:13:2c:cb:48:e3:fc:
9e:5d:7e:6c:dc:58:0d:75:b0:1e:bc:00:26:2e:8a:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:10:4F:F4:63:EF:71:F3:11:D8:5B:0E:E1:7F:CF:3D:5E:5F:46:08
X509v3 Authority Key Identifier:
keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e2:5d:1e:92:a9:f4:11:4d:49:36:41:d4:72:f3:3a:d8:b2:
ad:95:4b:00:14:26:c4:d2:02:bd:21:a0:59:d6:6c:ef:e3:97:
15:6a:80:27:e4:32:9f:ed:d8:d3:49:83:c0:dd:5a:49:b9:92:
b9:21:b6:ab:c9:a0:a1:7a:b3:f4:49:4f:86:26:b9:85:21:fe:
e6:3b:b7:a3:a3:c5:86:5b:54:f8:84:0f:ed:b1:da:56:15:dc:
0f:a7:3d:a6:95:ed:e9:d9:45:7e:41:b5:2e:82:f5:6d:64:60:
bc:2a:a6:d0:9f:b6:64:8f:d1:93:16:b2:93:70:54:6a:e8:cf:
8e:22:32:24:90:97:7f:dd:67:ce:9b:dd:0a:41:18:fc:49:a6:
6c:14:27:8d:16:2b:af:c7:3e:4c:31:a4:57:38:47:22:58:ce:
18:bf:72:5f:7a:a1:a3:8f:98:a2:9e:ee:3a:26:f3:98:1e:95:
b4:d0:3e:c1:e7:60:9e:fb:a6:0a:b5:88:b7:f4:94:ad:32:66:
3b:a9:e0:8e:5e:0c:3f:9a:67:64:e9:88:70:6c:29:30:fe:43:
ee:0e:d1:94:84:21:05:09:34:75:a2:03:08:86:13:e8:35:e4:
f9:78:f4:3f:cc:f6:31:b5:d8:56:c3:6e:85:9c:22:63:13:25:
2d:3c:0f:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkesC+heSAnZcX4afsgVa10MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZGFlNzY3OGEzOTY5NjllNjM0MGM5ZGNiNjVjZGU5ZTMy
OTU1NGEwHhcNMjUwOTA2MTEwMTI2WhcNMjUwOTA3MTEwMTI2WjAzMTEwLwYDVQQD
EyhiYTEwNGZmNDYzZWY3MWYzMTFkODViMGVlMTdmY2YzZDVlNWY0NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD5ksH49AAGm5yo5z/iviTxTye3w
9w27XAzegAUrPtUBboo7p3jyknaJrs42yWrPAfUFCoudc7EhQIrOTC6cyy4WbybS
SjyFf6o4yta3tG4lz2AEE4w4+9JGCmOk/3uxrUKOY+OMsrEhzKoknUVcgjihqSYt
b6zoRD9lBO9Z0DoGYWnB+uaLIFConBs/lXJIooVtZSIL4GlRITPL1ovTcDJ5MwEl
1jnT1xXqVp90cYKQKmmpFLgGgSs1+LUvF/aN/QddKQ/6cCSwIYOdCQGFzGyujsXD
w8TYe8+YTpZ1PajZizxaut4LCFATLMtI4/yeXX5s3FgNdbAevAAmLor7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoQT/Rj73HzEdhbDuF/zz1eX0YIMB8GA1UdIwQY
MBaAFKDa52eKOWlp5jQMnctlzenjKVVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDct
ZjczNWUzZGFmZDUzLzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80NjM1OGUtNTRmNy00ZjRiLWE3NDctZjczNWUzZGFmZDUz
LzEvb05yblo0bzVhV25tTkF5ZHkyWE42ZU1wVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOJdHpKp
9BFNSTZB1HLzOtiyrZVLABQmxNICvSGgWdZs7+OXFWqAJ+Qyn+3Y00mDwN1aSbmS
uSG2q8mgoXqz9ElPhia5hSH+5ju3o6PFhltU+IQP7bHaVhXcD6c9ppXt6dlFfkG1
LoL1bWRgvCqm0J+2ZI/Rkxayk3BUaujPjiIyJJCXf91nzpvdCkEY/EmmbBQnjRYr
r8c+TDGkVzhHIljOGL9yX3qho4+Yop7uOibzmB6VtNA+wedgnvumCrWIt/SUrTJm
O6ngjl4MP5pnZOmIcGwpMP5D7g7RlIQhBQk0daIDCIYT6DXk+Xj0P8z2MbXYVsNu
hZwiYxMlLTwPfQ==
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:00:33 2025 by rpki-client